$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/29733abc-0bd0-361c-a8a5-18f43037e30b.roa File: 29733abc-0bd0-361c-a8a5-18f43037e30b.roa (raw, json) Hash identifier: dHpz8I4NObSVtxbw45s91ZZkT7YkoSylwIQh3nTNcm4= Subject key identifier: 81:AB:1F:6F:42:28:8A:B9:DE:76:8D:63:84:98:E7:08:25:6D:61:88 Certificate issuer: /CN=d746a902-1ae2-430e-a925-eb91da1ee600 Certificate serial: 010D0C9F4328584D34FFBE305FD25B240535C540 Authority key identifier: 3B:0A:9A:00:67:FC:F9:95:FE:DA:D3:B5:9D:0C:6E:8C:13:DE:2D:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/29733abc-0bd0-361c-a8a5-18f43037e30b.roa Signing time: Wed 18 Mar 2026 07:38:54 +0000 ROA not before: Wed 18 Mar 2026 07:38:54 +0000 ROA not after: Tue 16 Jun 2026 07:38:54 +0000 asID: 402259 IP address blocks: 23.154.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/d746a902-1ae2-430e-a925-eb91da1ee600.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/d746a902-1ae2-430e-a925-eb91da1ee600.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:ff:be:30:5f:d2:5b:24:05:35:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d746a902-1ae2-430e-a925-eb91da1ee600 Validity Not Before: Mar 18 07:38:54 2026 GMT Not After : Jun 16 07:38:54 2026 GMT Subject: CN=3c6928c5-a5e0-4b8c-ac57-e22748bec47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:75:13:65:24:52:c8:a6:9e:11:c8:4c:69: 38:29:03:1d:8e:03:30:cc:7b:bb:66:56:25:c7:0f: 00:e7:5b:bb:92:33:25:28:23:6a:66:af:67:99:30: d1:ab:57:b1:9d:69:7b:a0:80:b4:e2:f5:fe:e2:64: f0:c4:3a:73:7d:e7:68:b0:60:0f:f4:fa:de:8e:54: 55:53:f9:73:52:7e:d0:0b:cd:b3:57:1b:93:df:bf: e5:26:0d:51:ab:15:c9:f2:8c:73:77:fd:fc:40:46: e8:78:3c:07:1a:72:2b:fc:3f:ef:0a:74:17:16:df: 82:44:6c:8c:3f:fd:c1:18:2c:ea:16:fb:7f:13:c9: 89:77:10:28:79:be:fc:2c:03:93:9e:7f:23:d5:58: af:99:27:8a:b6:af:4c:b3:24:93:a8:d2:6f:09:37: 84:c8:97:bc:15:be:f2:79:5c:88:7f:68:eb:a6:ca: 7c:bb:5c:70:0f:3f:fe:23:89:23:7b:3f:1a:77:f8: 8c:aa:ba:9d:dc:91:8f:d0:fa:6f:67:75:14:c9:04: 7b:66:a2:74:06:62:14:5a:98:16:e0:67:95:58:0a: a3:76:c8:6b:cb:55:ca:68:53:2a:bc:6b:bf:b3:fe: 3c:f7:7b:fa:89:b6:3a:fb:1c:db:fd:c0:ba:05:53: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:1F:6F:42:28:8A:B9:DE:76:8D:63:84:98:E7:08:25:6D:61:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/29733abc-0bd0-361c-a8a5-18f43037e30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/d746a902-1ae2-430e-a925-eb91da1ee600.crl X509v3 Authority Key Identifier: keyid:3B:0A:9A:00:67:FC:F9:95:FE:DA:D3:B5:9D:0C:6E:8C:13:DE:2D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600.cer sbgp-ipAddrBlock: critical IPv4: 23.154.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:14:6c:88:44:c2:4f:84:c2:4b:7a:0f:11:36:7e:2a:22:fe: be:d2:9e:12:2d:40:97:4d:c6:22:db:6d:e6:b8:74:90:8d:17: a4:dc:2c:1a:ed:44:68:18:99:c1:3b:3e:d3:39:0f:44:dc:f6: 76:e0:d9:7a:c2:89:4e:18:da:80:38:01:ec:b7:b0:d1:25:bd: fc:8f:8a:86:07:60:92:1c:78:c0:87:a8:23:9e:2b:c9:a0:fb: 60:b8:c9:69:e1:52:b6:99:c5:25:d6:e9:fb:d1:19:4e:98:3e: d3:4d:29:74:27:ca:33:6c:ec:5c:f7:ff:cf:5e:9f:50:b8:3a: 15:1e:c5:c9:48:14:9b:bb:7c:ab:9d:31:c9:af:4b:6b:fa:c9: 81:f4:26:fc:5d:4f:58:cc:8d:08:e8:44:d2:c8:f5:dd:e5:b7: 1e:bb:42:23:73:7f:21:09:20:f0:a3:e7:e1:a6:a4:d4:0f:55: 67:be:58:61:8c:50:50:66:2f:aa:b5:93:db:cc:29:86:1e:c7: 24:ad:d8:21:4c:14:22:6c:3f:50:00:d1:b6:54:ef:ae:6b:7a: 26:53:4c:e3:ad:8e:e4:d9:bd:5e:e3:8a:c1:c6:66:c5:a9:b4: 1c:f0:6e:bf:2d:52:8c:68:ae:bd:5d:5f:f3:03:29:e9:37:a3: d0:a8:43:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00/74wX9JbJAU1xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc0NmE5MDItMWFlMi00MzBlLWE5MjUtZWI5MWRhMWVl NjAwMB4XDTI2MDMxODA3Mzg1NFoXDTI2MDYxNjA3Mzg1NFowLzEtMCsGA1UEAxMk M2M2OTI4YzUtYTVlMC00YjhjLWFjNTctZTIyNzQ4YmVjNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprZ1E2UkUsimnhHITGk4KQMdjgMwzHu7ZlYl xw8A51u7kjMlKCNqZq9nmTDRq1exnWl7oIC04vX+4mTwxDpzfedosGAP9PrejlRV U/lzUn7QC82zVxuT37/lJg1RqxXJ8oxzd/38QEboeDwHGnIr/D/vCnQXFt+CRGyM P/3BGCzqFvt/E8mJdxAoeb78LAOTnn8j1VivmSeKtq9MsySTqNJvCTeEyJe8Fb7y eVyIf2jrpsp8u1xwDz/+I4kjez8ad/iMqrqd3JGP0PpvZ3UUyQR7ZqJ0BmIUWpgW 4GeVWAqjdshry1XKaFMqvGu/s/4893v6ibY6+xzb/cC6BVPH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGrH29CKIq53naNY4SY5wglbWGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNzQ2 YTkwMi0xYWUyLTQzMGUtYTkyNS1lYjkxZGExZWU2MDAvMjk3MzNhYmMtMGJkMC0z NjFjLWE4YTUtMThmNDMwMzdlMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDc0NmE5MDItMWFlMi00MzBlLWE5 MjUtZWI5MWRhMWVlNjAwL2Q3NDZhOTAyLTFhZTItNDMwZS1hOTI1LWViOTFkYTFl ZTYwMC5jcmwwHwYDVR0jBBgwFoAUOwqaAGf8+ZX+2tO1nQxujBPeLdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNzQ2YTkwMi0xYWUyLTQzMGUtYTkyNS1lYjkx ZGExZWU2MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQUbIhEwk+Ewkt6DxE2fioi/r7SnhItQJdNxiLbbea4dJCNF6TcLBrt RGgYmcE7PtM5D0Tc9nbg2XrCiU4Y2oA4Aey3sNElvfyPioYHYJIceMCHqCOeK8mg +2C4yWnhUraZxSXW6fvRGU6YPtNNKXQnyjNs7Fz3/89en1C4OhUexclIFJu7fKud McmvS2v6yYH0JvxdT1jMjQjoRNLI9d3ltx67QiNzfyEJIPCj5+GmpNQPVWe+WGGM UFBmL6q1k9vMKYYexySt2CFMFCJsP1AA0bZU765reiZTTOOtjuTZvV7jisHGZsWp tBzwbr8tUoxorr1dX/MDKek3o9CoQ5Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:41:48 2026 by rpki-client